github.com/hashicorp/consul
Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
View on Github
Activity
- Latest release
- 4mo ago
- Total releases
- 67
- Cadence
- ~28 days
- Last 12 months
- 9
Reach
- Stars
- 30.1k
Details
- First release
- May 01, 2014
| Version | Released | |
|---|---|---|
v1.22.7
patch
|
v1.22.7
patch
Dependencies (111)
+ 103 more |
|
v1.22.6
minor
|
v1.22.6
minor
Dependencies (111)
+ 103 more |
|
v1.22.5
patch
|
v1.22.5
patch
Dependencies (111)
+ 103 more |
|
v1.22.4
patch
1 CVE
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev |
v1.22.4
patch
Dependencies (111)
+ 103 more |
|
v1.22.3
patch
1 CVE
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev |
v1.22.3
patch
Dependencies (107)
+ 99 more |
|
v1.22.2
patch
1 CVE
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev |
v1.22.2
patch
Dependencies (115)
+ 107 more |
|
v1.22.1
patch
1 CVE
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev |
v1.22.1
patch
Dependencies (115)
+ 107 more |
|
v1.22.0
minor
1 CVE
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev |
v1.22.0
minor
Dependencies (115)
+ 107 more |
|
v1.22.0-rc2
pre
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.22.0-rc2
pre
Dependencies (115)
+ 107 more |
|
v1.22.0-rc1
pre
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.22.0-rc1
pre
Dependencies (115)
+ 107 more |
|
v1.21.5
patch
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.5
patch
Dependencies (113)
+ 105 more |
|
v1.21.4
patch
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.4
patch
Dependencies (110)
+ 102 more |
|
v1.21.3
minor
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.3
minor
Dependencies (110)
+ 102 more |
|
v1.21.2
patch
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.2
patch
Dependencies (110)
+ 102 more |
|
v1.21.1
patch
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.1
patch
Dependencies (110)
+ 102 more |
|
v1.21.0
minor
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.0
minor
Dependencies (110)
+ 102 more |
|
v1.20.6
patch
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.20.6
patch
Dependencies (110)
+ 102 more |
|
v1.21.0-rc2
pre
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.0-rc2
pre
Dependencies (110)
+ 102 more |
|
v1.20.5
patch
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.20.5
patch
Dependencies (110)
+ 102 more |
|
v1.21.0-rc1
pre
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.0-rc1
pre
Dependencies (110)
+ 102 more |
|
v1.20.3
minor
3 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.20.3
minor
Dependencies (110)
+ 102 more |
|
v1.16.6
patch
6 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.16.6
patch
Dependencies (102)
+ 94 more |
|
v1.16.5
patch
6 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.16.5
patch
Dependencies (102)
+ 94 more |
|
v1.15.8
patch
6 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.8
patch
Dependencies (100)
+ 92 more |
|
v1.16.0
minor
7 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-3518
GO-2024-2704
BIT-consul-2023-3518
GHSA-9rhf-q362-77mx
Jun 04, 2024
Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul Fixed in
1.16.1
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.16.0
minor
Dependencies (101)
+ 93 more |
|
v1.13.8
patch
8 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-3920
GO-2022-1121
BIT-consul-2022-3920
GHSA-gw2g-hhc9-wgjh
Aug 21, 2024
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.14.0
References Updated Aug 07, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.8
patch
Dependencies (79)
+ 71 more |
|
v1.15.0
minor
8 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-2816
GO-2023-1828
BIT-consul-2023-2816
GHSA-rqjq-ww83-wv5c
Aug 20, 2024
Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul Fixed in
1.15.3
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.15.0
minor
Dependencies (90)
+ 82 more |
|
v1.12.9
patch
7 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.12.9
patch
Dependencies (79)
+ 71 more |
|
v1.13.5
patch
8 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-3920
GO-2022-1121
BIT-consul-2022-3920
GHSA-gw2g-hhc9-wgjh
Aug 21, 2024
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.14.0
References Updated Aug 07, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.5
patch
Dependencies (79)
+ 71 more |
|
v1.14.2
minor
8 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-0845
GO-2023-1639
BIT-consul-2023-0845
GHSA-wj6x-hcc2-f32j
Aug 20, 2024
Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul Fixed in
1.14.5
References
Updated Aug 07, 2026 · Source: OSV.dev |
v1.14.2
minor
Dependencies (83)
+ 75 more |
|
v1.13.4
patch
8 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-3920
GO-2022-1121
BIT-consul-2022-3920
GHSA-gw2g-hhc9-wgjh
Aug 21, 2024
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.14.0
References Updated Aug 07, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.4
patch
Dependencies (79)
+ 71 more |
|
v1.12.7
minor
7 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.12.7
minor
Dependencies (79)
+ 71 more |
|
v1.11.10
patch
7 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.11.10
patch
Dependencies (77)
+ 69 more |
|
v1.13.0
minor
10 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-3920
GO-2022-1121
BIT-consul-2022-3920
GHSA-gw2g-hhc9-wgjh
Aug 21, 2024
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.14.0
References Updated Aug 07, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (78)
+ 70 more |
|
v1.13.0-alpha2
pre
7 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0-alpha2
pre
Dependencies (78)
+ 70 more |
|
v1.11.5
patch
9 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.11.5
patch
Dependencies (77)
+ 69 more |
|
v1.9.16
patch
12 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.9.16
patch
Dependencies (73)
+ 65 more |
|
v1.9.14
patch
13 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.9.14
patch
Dependencies (73)
+ 65 more |
|
v1.10.6
patch
11 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.10.6
patch
Dependencies (73)
+ 65 more |
|
v1.11.1
minor
11 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.11.1
minor
Dependencies (76)
+ 68 more |
|
v1.10.3
minor
11 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.10.3
minor
Dependencies (73)
+ 65 more |
|
v1.10.1-beta1
pre
13 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.10.1-beta1
pre
Dependencies (73)
+ 65 more |
|
v1.7.14
patch
11 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.7.14
patch
Dependencies (65)
+ 57 more |
|
v1.9.5
patch
15 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.9.5
patch
Dependencies (72)
+ 64 more |
|
v1.9.2
minor
16 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10006
GO-2024-3241
BIT-consul-2024-10006
GHSA-5c4w-8hhh-3c3h
Nov 04, 2024
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10005
GO-2024-3243
BIT-consul-2024-10005
GHSA-chgm-7r52-whjj
Nov 04, 2024
Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul Fixed in
1.20.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-25864
GO-2023-1851
BIT-consul-2020-25864
GHSA-8xmx-h8rq-h94j
Aug 20, 2024
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.7.14
1.8.10
1.9.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.9.2
minor
Dependencies (72)
+ 64 more |
|
v1.7.10
patch
12 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-25864
GO-2023-1851
BIT-consul-2020-25864
GHSA-8xmx-h8rq-h94j
Aug 20, 2024
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.7.14
1.8.10
1.9.5
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.7.10
patch
Dependencies (65)
+ 57 more |
|
v1.9.0-beta3
pre
11 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.9.0-beta3
pre
Dependencies (72)
+ 64 more |
|
v1.8.4
patch
16 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-25864
GO-2023-1851
BIT-consul-2020-25864
GHSA-8xmx-h8rq-h94j
Aug 20, 2024
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.7.14
1.8.10
1.9.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-28053
GO-2024-2505
BIT-consul-2020-28053
GHSA-6m72-467w-94rh
Jun 28, 2024
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.6.10
1.7.10
1.8.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2020-25201
GO-2024-2501
BIT-consul-2020-25201
GHSA-496g-fr33-whrf
Jun 28, 2024
Denial of service in HashiCorp Consul in github.com/hashicorp/consul Denial of service in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.7.9
1.8.5
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.8.4
patch
Dependencies (72)
+ 64 more |
|
v1.7.6
patch
14 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-25864
GO-2023-1851
BIT-consul-2020-25864
GHSA-8xmx-h8rq-h94j
Aug 20, 2024
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.7.14
1.8.10
1.9.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-28053
GO-2024-2505
BIT-consul-2020-28053
GHSA-6m72-467w-94rh
Jun 28, 2024
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.6.10
1.7.10
1.8.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2020-25201
GO-2024-2501
BIT-consul-2020-25201
GHSA-496g-fr33-whrf
Jun 28, 2024
Denial of service in HashiCorp Consul in github.com/hashicorp/consul Denial of service in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.7.9
1.8.5
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.7.6
patch
Dependencies (65)
+ 57 more |
|
v1.8.1
minor
16 CVEs
CVE-2026-2808
GO-2026-4690
BIT-consul-2026-2808
GHSA-cpfq-66p2-336j
Mar 16, 2026
Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul Fixed in
1.22.5
References Updated Mar 16, 2026 · Source: OSV.dev
CVE-2025-11374
GO-2025-4081
BIT-consul-2025-11374
GHSA-7g3r-8c6v-hfmr
Nov 05, 2025
Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-11375
GO-2025-4082
BIT-consul-2025-11375
GHSA-qh7p-pfq3-677h
Nov 05, 2025
Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.22.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-10086
GO-2024-3242
BIT-consul-2024-10086
GHSA-99wr-c2px-grmh
Nov 04, 2024
Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.20.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-40716
GO-2022-1029
BIT-consul-2022-40716
GHSA-m69r-9g56-7mv8
Aug 21, 2024
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul Fixed in
1.11.9
1.12.5
1.13.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-24687
GO-2022-0953
BIT-consul-2022-24687
GHSA-hj93-5fg3-3chr
Aug 21, 2024
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul Fixed in
1.9.15
1.10.8
1.11.3
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-32574
GO-2022-0894
BIT-consul-2021-32574
GHSA-25gf-8qrr-g78r
Aug 21, 2024
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-36213
GO-2022-0895
BIT-consul-2021-36213
GHSA-8h2g-r292-j8xh
Aug 21, 2024
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul Fixed in
1.10.1
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2022-29153
GO-2022-0615
BIT-consul-2022-29153
GHSA-q6h7-4qgw-2j9p
Aug 21, 2024
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul Fixed in
1.9.17
1.10.10
1.11.5
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-37219
GO-2022-0593
BIT-consul-2021-37219
GHSA-ccw8-7688-vqx4
Aug 21, 2024
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2021-38698
GO-2022-0559
BIT-consul-2021-38698
GHSA-6hw5-6gcx-phmw
Aug 21, 2024
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul Fixed in
1.8.15
1.9.9
1.10.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-1297
GO-2023-1827
BIT-consul-2023-1297
GHSA-c57c-7hrj-6q6v
Aug 20, 2024
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul Fixed in
1.14.5
1.15.3
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-25864
GO-2023-1851
BIT-consul-2020-25864
GHSA-8xmx-h8rq-h94j
Aug 20, 2024
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul Fixed in
1.7.14
1.8.10
1.9.5
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2020-28053
GO-2024-2505
BIT-consul-2020-28053
GHSA-6m72-467w-94rh
Jun 28, 2024
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.6.10
1.7.10
1.8.6
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2020-25201
GO-2024-2501
BIT-consul-2020-25201
GHSA-496g-fr33-whrf
Jun 28, 2024
Denial of service in HashiCorp Consul in github.com/hashicorp/consul Denial of service in HashiCorp Consul in github.com/hashicorp/consul Fixed in
1.7.9
1.8.5
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2021-41803
GO-2024-2683
BIT-consul-2021-41803
GHSA-hr3v-8cp3-68rf
Apr 05, 2024
Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in
1.11.9
1.12.5
1.13.2
References Updated Aug 07, 2026 · Source: OSV.dev |
v1.8.1
minor
Dependencies (72)
+ 64 more |